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Amendments to the claims: 

This listing of claims replaces all prior versions and listings of cMms in the application: 

Listing of claims : 

1. (Currently Amended) A method for monitoring of communications traffic, 
comprising: 

connecting a recorder to a network switch to record packet-data communication trjiffic 
received from, and passing through, the network switch; 

encrypting the packet-data communication traffic at an encryption engine 
conmiunicatively connected to the recorder after the packet-data communication traffic has 
passed through the network switch to create encrypted data; «id 

storing the encrypted data in a storage device such that the encrypted data can be 
decrypted only by means of decryption keys that exhibit restricted availabilit y; and 

providing the decryption keys having embedded , wherein encrypted search conditions 
therein to only provide access to encrypted data meeting criteria specified by the encrypted 
search conditions are included within the decryption keys . 

wherein the criteria specify an identification of the portions of the packet-data 
communications traffic within the encrypted data to be decrypted . 

2. (previously presented) The method as claimed in Claim 1 further including 
employment of a spare disk and/or CPU capacity within a telecommunications system. 
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3. (canceled) 

4. (previously presented) The method as claimed in Claim 1, further including the step of 
employing separate levels of authorization for access to the stored data. 

5. (previously presented) The method as claimed in Claim 1, further including the step of 
employing a decryption key that is useable only once. 

6. (previously presented) The method as claimed in Claim 1, further including the step of 
logging all accesses to the stored data to an encrypted secure audit trail. 

7. (previously presented) The method as claimed in Claim 1, further including a tamper 
detection reference within the encrypted data. 

8. (previously presented) The method as claimed in Claim 1, further including the step of 
monitoring all the available communications traffic. 

9. (previously presented) The method as claimed in Claim 8, wherein the step of storing 
the recorded traffic comprises the step of recording all of the recorded traffic. 
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10. (previously presented) The method as claimed in CMm 1, wherein the 
communications traffic to be recorded comprises traffic through a telecommunications switch, 
router or gateway. 

1 1 . (previously presented) The method as claimed in Claim 1, further including the step 
of encrypting details relating to the communications traffic and storing the said encrypted details 
for subsequent access. 

12. (previously presented) The method as claimed in Claim 1. further including the step 
of authorizing use of the required decryption key in a restricted manner. 

1 3. (Currently Amended) A system for monitoring of communications traffic, 

comprising: 

a recorder that records the communications traffic, the communications traffic being 
received by the recorder from a network switch; 

an encryption engine that encrypts the communications traffic after the communications 
traffic has passed through the network switch to the recorder; and 

a storage device that stores recorded communications traffic as encrypted data, such that 
the encrypted data can be decrypted only by means of decryption k eys that exhibit restricted 
availability, wherein encrypted search conditions are included within the keys that only provide 
access to encrypted data meeting criteria specified by the encrypted search conditions, and 
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wherein the criteria specify an identification of the portions of the communications traffic within 
the encrypted data to be decrypted . 

14. (previously presented) The system as claimed in Claim 13 further including 
application software that executes the method steps of anyone or more of Claims 2-12. 

15-22 (Canceled). 



